AVID-2026-R1384

Description

Arbitrary File Write via TarSlip in dmlc/gluon-cv (CVE-2024-12216)

Details

A vulnerability in the ImageClassificationDataset.from_csv() API of the dmlc/gluon-cv repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts tar.gz files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers can exploit this by crafting malicious tar files that, when extracted, can overwrite files on the victim’s system via path traversal or faked symlinks.

Reason for inclusion in AVID: CVE-2024-12216 describes a TarSlip vulnerability in the dmlc/gluon-cv library, where ImageClassificationDataset.from_csv() downloads and extracts tar.gz files from URLs without proper sanitization, enabling arbitrary file write via path traversal or fake symlinks. This directly affects a software component used in AI data loading pipelines, i.e., a general-purpose AI software stack, representing a software supply chain vulnerability in AI systems. It is security-related (arbitrary file write, potential tampering), and there is explicit CVSS/ CWE evidence included. Therefore, it satisfies all AVID criteria for inclusion.

References

Affected or Relevant Artifacts

Developer: dmlc
Deployer: dmlc
Artifact Details:

Type	Name
System	dmlc/gluon-cv

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.0
Vector String	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Base Score	7.1
Base Severity	🔴 High
Attack Vector	LOCAL
Attack Complexity	🟢 Low
Privileges Required	NONE
User Interaction	REQUIRED
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	🔴 High
Availability Impact	🔴 High

CWE

ID	Description
CWE-59	CWE-59 Improper Link Resolution Before File Access

Other information

Report Type: Advisory
Credits:
Date Reported: 2025-03-20
Version: 0.3.3
AVID Entry